Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
File: tADiGrPTJXQtuHeDDrxEB233CUg.mft (raw, json)
Hash identifier: vVNjMf6yzWukjqh//ZY6ErIyEXbo/d7Jxs0MLa0QH1Q=
Subject key identifier: 1B:F5:23:AF:5A:C1:34:03:77:F1:D2:15:42:BF:B5:57:D0:AE:3D:67
Authority key identifier: B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
Certificate issuer: /CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Certificate serial: 0EC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
Manifest number: 2AD1
Signing time: Fri 31 Jan 2025 16:50:23 +0000
Manifest this update: Fri 31 Jan 2025 16:50:22 +0000
Manifest next update: Fri 07 Feb 2025 16:50:22 +0000
Files and hashes: 1: tADiGrPTJXQtuHeDDrxEB233CUg.crl (hash: tz59EurVQ4q25C+xCgsPShfdagi9PTKe4sigPGSTuho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3782 (0xec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91658EF/serialNumber=B400E21AB3D325742DB877830EBC44076DF70948
Validity
Not Before: Jan 31 16:50:22 2025 GMT
Not After : Feb 7 16:50:22 2025 GMT
Subject: CN=679cff4e-9185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:76:b9:c4:eb:a1:5f:da:32:06:b7:79:4e:
04:b9:d9:1b:ff:ba:d8:f7:06:14:ef:53:87:a1:ed:
b9:d8:2f:57:bb:c0:81:cc:06:89:b7:16:17:91:10:
10:14:6c:43:c0:fb:7c:b4:b5:b2:ca:17:9d:09:08:
f5:e4:76:55:f2:f4:85:35:bc:e9:92:98:9d:8e:f6:
72:1d:2f:c9:ba:b1:8c:fb:b5:72:bd:6b:d7:d4:8b:
e6:61:99:97:07:81:1f:fd:b6:49:a4:ed:61:7a:1c:
30:ca:b2:4f:dd:1f:28:d4:56:18:84:9e:03:22:d9:
52:96:7b:64:d8:cf:a1:1b:22:02:95:be:27:12:30:
b3:b5:95:34:0d:74:ad:f1:63:18:b3:8a:cb:d4:29:
4c:26:77:94:18:72:d5:40:da:58:e6:01:74:b3:e4:
fe:cb:75:67:93:c9:b7:80:d5:d1:7f:33:24:00:84:
38:4b:65:ea:d3:c0:ba:2e:19:d9:5d:38:7a:1d:74:
91:c3:00:0c:30:bc:ee:ef:07:5c:75:e2:e3:20:57:
f0:58:d9:14:e8:dc:bf:5f:fb:c9:0d:54:74:91:ab:
ca:98:4b:2f:1b:da:cd:6c:c1:5e:92:c2:0c:d1:de:
9f:5e:00:14:18:31:bd:b3:95:e2:4b:24:e3:93:a5:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:23:AF:5A:C1:34:03:77:F1:D2:15:42:BF:B5:57:D0:AE:3D:67
X509v3 Authority Key Identifier:
keyid:B4:00:E2:1A:B3:D3:25:74:2D:B8:77:83:0E:BC:44:07:6D:F7:09:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tADiGrPTJXQtuHeDDrxEB233CUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/tADiGrPTJXQtuHeDDrxEB233CUg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e7:e0:87:94:02:9a:09:7d:0a:7e:8a:97:75:0a:c6:49:d3:
18:1a:47:d7:9b:a1:99:1b:30:bc:cf:c7:6d:77:1e:df:33:1f:
73:5f:c1:e6:69:cb:21:51:16:cc:7a:d7:ac:13:e6:45:77:52:
84:00:f5:b8:d0:32:ad:33:0f:20:47:c4:ac:38:67:e4:5c:12:
6c:5e:f7:0f:c0:3b:43:a3:16:87:b4:bb:ca:ba:8e:cd:11:2c:
6e:86:ec:92:69:55:5d:c4:10:35:c6:e3:b7:e5:a4:e4:77:37:
c0:4a:ce:a1:1f:6a:94:2c:0a:3f:a2:47:80:4c:09:53:95:30:
da:3f:89:8a:c5:22:1c:e9:44:28:08:5b:1f:3c:e5:70:d6:50:
7f:2b:ca:12:a6:c4:6f:c0:d3:8e:2c:99:79:04:90:48:b6:f1:
d4:2e:58:17:45:51:80:c3:cc:11:1d:a2:6b:e4:66:55:05:a6:
43:04:c8:42:a5:1b:2e:6b:da:d9:49:5f:59:03:c5:dc:5c:90:
80:8d:b2:2a:c6:c9:5f:5d:bf:ee:c4:ca:1e:f1:32:5d:25:fa:
53:40:b3:ee:ef:ae:ce:a4:83:5d:82:44:ab:d8:64:d2:b7:db:
a7:b4:e6:5e:4d:7a:d4:90:e9:72:6d:86:ef:67:95:7f:8f:d8:
36:02:b4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:12 2025 by rpki-client